joeflorencio-openai
73bf181272
Require forced macOS preferences for managed configuration ( #46032 )
...
## Why
`CFPreferencesCopyAppValue` also searches user-writable domains. Ordinary user defaults must not supply trusted administrator configuration or override lower requirements layers.
## What changed
- Check `CFPreferencesAppValueIsForced` before reading `config_toml_base64` and `requirements_toml_base64`, and recheck after reading to ignore values that became unforced.
- Wrap returned property-list values as `CFType` and require a `CFString`, returning `InvalidData` for other types without exposing preference contents.
## Testing
Add tests for both preference keys covering unforced and missing values, loss of forced status during a read, preservation of string contents, and rejection of non-string values with diagnostics that omit their contents.
GitOrigin-RevId: 2eff08ba6b073b4c59ca757e054d112d2a5256d0
2026-09-16 21:30:42 +00:00
..
2026-09-15 02:35:59 +00:00
2026-09-15 22:52:56 +00:00
2026-09-16 21:01:13 +00:00
2026-09-14 22:31:32 +00:00
2026-09-15 19:51:06 +00:00
2026-09-16 20:39:18 +00:00
2026-09-03 06:02:25 +00:00
2026-09-16 16:56:41 +00:00
2026-09-11 20:10:02 +00:00
2026-09-15 00:29:13 +00:00
2026-09-09 03:17:48 +00:00
2026-09-15 19:13:08 +00:00
2026-09-07 16:55:06 +00:00
2026-09-16 09:03:41 +00:00
2026-09-10 21:41:39 +00:00
2026-09-03 01:46:37 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-15 18:52:15 +00:00
2026-09-16 11:46:37 +00:00
2026-09-15 17:32:33 +00:00
2026-09-16 01:01:57 +00:00
2026-09-14 19:12:59 +00:00
2026-09-16 20:32:52 +00:00
2026-09-05 01:25:06 +00:00
2026-09-16 21:30:42 +00:00
2026-09-15 18:23:08 +00:00
2026-09-12 18:16:17 +00:00
2026-09-16 21:15:09 +00:00
2026-09-11 01:57:54 +00:00
2026-09-16 21:15:09 +00:00
2026-09-05 12:17:32 +00:00
2026-09-16 04:23:46 +00:00
2026-09-16 21:21:45 +00:00
2026-09-15 16:40:06 +00:00
2026-09-16 21:01:13 +00:00
2026-09-10 18:24:13 +00:00
2026-09-16 01:16:35 +00:00
2026-09-10 18:10:26 +00:00
2026-09-15 16:40:06 +00:00
2026-09-06 20:52:29 +00:00
2026-09-16 16:59:47 +00:00
2026-09-16 19:25:50 +00:00
2026-09-10 00:26:30 +00:00
2026-09-16 18:13:23 +00:00
2026-09-11 21:59:24 +00:00
2026-09-16 18:21:22 +00:00
2026-09-16 19:46:52 +00:00
2026-09-16 15:17:41 +00:00
2026-09-16 00:38:34 +00:00
2026-09-16 19:46:52 +00:00
2026-09-16 19:46:52 +00:00
2026-09-16 21:01:13 +00:00
2026-09-14 22:40:20 +00:00
2026-09-16 21:08:43 +00:00
2026-09-15 21:19:08 +00:00
2026-09-16 21:15:09 +00:00
2026-09-16 21:01:13 +00:00
2026-09-16 21:01:13 +00:00
2026-09-11 03:16:01 +00:00
2026-09-16 01:01:57 +00:00
2026-09-10 20:50:10 +00:00
2026-09-16 15:36:43 +00:00
2026-09-16 18:21:22 +00:00
2026-09-15 18:06:03 +00:00
2026-09-09 04:00:10 +00:00
2026-09-05 05:21:42 +00:00
2026-09-15 02:33:27 +00:00
2026-09-16 09:03:41 +00:00
2026-09-02 18:34:27 +00:00
2026-09-14 21:06:36 +00:00
2026-09-15 22:52:56 +00:00
2026-09-15 21:19:08 +00:00
2026-09-16 19:58:06 +00:00
2026-09-16 16:56:41 +00:00
2026-09-08 00:13:28 +00:00
2026-09-16 03:40:53 +00:00
2026-09-11 22:09:02 +00:00
2026-09-03 20:01:07 +00:00
2026-09-15 21:33:16 +00:00
2026-09-15 21:33:16 +00:00
2026-09-13 18:53:06 +00:00
2026-09-08 21:19:02 +00:00
2026-09-16 21:01:13 +00:00
2026-09-16 09:03:41 +00:00
2026-09-11 06:45:09 +00:00